chore: bump the rust group with 6 updates by dependabot[bot] · Pull Request #80 · rgdevment/LinkUnbound

dependabot · 2026-11-01T18:39:34Z

Bumps the rust group with 6 updates:

Package	From	To
interprocess	`2.4.4`	`2.4.7`
serde_json	`1.0.151`	`1.0.154`
psl	`2.1.238`	`2.1.245`
libc	`0.2.189`	`0.2.191`
objc2	`0.6.4`	`0.6.5`
tauri-winres	`0.3.6`	`0.3.7`

Updates interprocess from 2.4.4 to 2.4.7

Release notes

Sourced from interprocess's releases.

2.4.7

General

LocalSocketStream::split has been deprecated in favor of putting the stream in an Rc or Arc to better express the behavior and performance characteristics of the code in terms that are common to all Rust programs (since an Arc is what splitting uses under the hood).

Windows

TryFrom<OwnedHandle> on named pipes no longer attempts to reopen them into overlapped mode. The old mechanism was based on a misunderstanding of what ReOpenFile does for named pipes. See #100 for more information.

Fixed ConnectNamedPipe completing spuriously due to not being passed an OVERLAPPED structure (#101).

2.4.6

Fixed build on ARMv7.

Migrated from AsyncFd::with_interest to AsyncFd::register_with_interest per tokio-rs/tokio#8539.

2.4.5

PeerCreds has been improved on xucred platforms (FreeBSD, Dragonfly BSD, Apple platforms):

With a correction of a misunderstanding of the meaning of cr_groups, egid now returns Some and groups no longer includes the EGID twice.

The level of detail of the safety comments has been increased in preparation for upstreaming a version of PeerCreds into the standard library.

PeerCreds now has a method groups_truncated for checking if the groups returned by groups are not the full set of supplementary groups due to platform limitations.

Commits

885d96b chore: deprecate local socket splitting
fd026dd fix: do not use ReOpenFile with named pipes
cefab54 fix: intra doc links in crate-level docs
0169bcb fix: use overlapped ConnectNamedPipe
dc7bf10 fix: don't use --frozen in checks-and-tests.py
874861f fix: properly pin backtrace and owo-colors
bbe09b1 fix: use AsyncFd::register_with_interest
cdad0cb fix: construct timespec with default (#99)
5822593 chore: bump version
5b99120 fix: deal with Clippy regression
Additional commits viewable in compare view

Updates serde_json from 1.0.151 to 1.0.154

Release notes

Sourced from serde_json's releases.

v1.0.154

Support preserve_order in no_std builds (#1333, thanks @razmser)

v1.0.153

Report invalid UTF-8 at the first bad byte (#1345, thanks @00200200)

v1.0.152

Preserve sign of -0 in arbitrary_precision mode (#1346, thanks @yuxi-liu-wired)

Fix comparison of large non-integer values with f32::INFINITY (#1347, thanks @yuxi-liu-wired)

Commits

20572a6 Release 1.0.154
a91bfaf Fix RandomState links in map documentation
3c932c0 Merge pull request #1333 from razmser/no-std-preserve-order
4b2d726 Release 1.0.153
83335ee Touch up PR 1345
4b4810a Resolve range_plus_one pedantic clippy lint
8af71cc Merge pull request #1345 from 00200200/fix-invalid-utf8-error-column
452afa2 Correct multiline raw UTF-8 error positions and simplify indexing
c9f1e3b Release 1.0.152
854fc70 Touch up PR 1347
Additional commits viewable in compare view

Updates psl from 2.1.238 to 2.1.245

Commits

9246c06 bump version
979e5aa update the list
c247242 bump version
8514e1a update the list
ed56e90 bump version
b9de871 update the list
ab69705 bump version
fe24692 update the list
4e66610 bump version
b87c397 update the list
Additional commits viewable in compare view

Updates libc from 0.2.189 to 0.2.191

Release notes

Sourced from libc's releases.

0.2.191

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
Note that there may still be some changes to features gated by this config option, hence "unstable"

... (truncated)

Changelog

Sourced from libc's changelog.

0.2.191 - 2026-10-16

Support

Emscripten: Support v4.0.12 to v6.0.11 (#5610)

Added

Apple: Add F_SETNOSIGPIPE and F_GETNOSIGPIPE (#5609)

Apple: add ifaliasreq and in6_aliasreq (#5557)

FreeBSD: Add PT_* constants (#5625)

Haiku: Add AI_* and NI_* constants from netdb.h (#5585)

Hurd: Add POSIX_SPAWN_* flags (#5578)

NuttX: Add AT_SYMLINK_NOFOLLOW (#5614)

OpenBSD: Add sensordev (#5534)

QuRT: Add isatty (#5618)

WASI: Add pthread_condattr_{get,set}clock (#5626)

Fixed

FreeBSD-aarch64: Fix gpregs and fpregs (#5603)

Changed

AIX: Restore 'c_ulong' as the type of 'statvfs.f_fsid'. (#5616)

Android: Make prop_info an extern type (#5561)

Apple: Mach API is now available on non-MacOS targets again. This should resolve some issues building ecosystem crates. (#5612), (#5636)

FreeBSD: Add back NOTE_PCTRLMASK with a deprecation warning (#5600)

0.2.190 - 2026-10-02

There is now a single config for enabling 64-bit time_t: libc_unstable_time64. This can be set unconditionally; it opts in to 64-bit time_t on the following platforms that use 32-bit by default:

32-bit Linux-GNU

32-bit Linux-uClibc

32-bit Linux-musl. Note that setting this flag also enables some other changes that happend in musl v1.2.

32-bit Windows-GNU

ESP-IDF (all targets with this environment are 32-bit)

Most other 32-bit platforms are either already using 64-bit time_t, or are considered legacy and will not be gaining support from their upstream maintainers.

You can enable this using RUSTFLAGS:
RUSTFLAGS='--cfg=libc_unstable_time64' cargo ...
</tr></table> 

... (truncated)

Commits

ccc2ff4 libc: Release 0.2.191
bce6efb apple: Add mach_task_self and mach_task_self_ to semver checks
ecf4fd4 apple: Re-restrict mach_vm_map to MacOS-only
b0e0423 Revert "apple: Disable mach.h API on Apple mobile OSs"
9c7f568 apple: add ifaliasreq and in6_aliasreq
018c7e9 wasi: Add pthread_condattr_{get,set}clock
2c77185 openbsd: add sensordev structure
e10813c hurd: Add missing POSIX_SPAWN_* flags
2ea4bc1 Fix FreeBSD/aarch64
6d666fd dragonfly: Parse version from headers rather than CLI
Additional commits viewable in compare view

Updates objc2 from 0.6.4 to 0.6.5

Commits

d7d2fa2 Bump objc2 0.6.4 -> 0.6.5
ed5d37c Cherry-pick #862 for objc2 v0.6.5
See full diff in compare view

Updates tauri-winres from 0.3.6 to 0.3.7

Release notes

Sourced from tauri-winres's releases.

winres v0.3.7

Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
      Loaded 1338 security advisories (from /home/runner/.cargo/advisory-db)
    Updating crates.io index
    Scanning Cargo.lock for vulnerabilities (39 crate dependencies)

[0.3.7]

Add WindowsResource::compile_for_everything to link the resource into every target of the package, including test binaries.
- 376950a feat: add compile_for_everything (#42) on 2026-10-19

Updating crates.io index
   Packaging tauri-winres v0.3.7 (/home/runner/work/winres/winres)
    Updating crates.io index
    Packaged 17 files, 158.7KiB (25.2KiB compressed)
   Verifying tauri-winres v0.3.7 (/home/runner/work/winres/winres)
 Downloading crates ...
  Downloaded embed-resource v3.0.9
  Downloaded find-msvc-tools v0.1.9
  Downloaded indexmap v2.11.4
  Downloaded equivalent v1.0.2
  Downloaded shlex v1.3.0
  Downloaded cc v1.2.61
  Downloaded rustc_version v0.4.1
  Downloaded serde_spanned v1.0.4
  Downloaded toml_writer v1.0.7+spec-1.1.0
  Downloaded toml_datetime v1.0.1+spec-1.1.0
  Downloaded toml_parser v1.0.10+spec-1.1.0
  Downloaded serde_core v1.0.228
  Downloaded toml v1.0.7+spec-1.1.0
  Downloaded memchr v2.8.0
  Downloaded winnow v1.0.2
   Compiling serde_core v1.0.228
   Compiling winnow v1.0.2
   Compiling semver v1.0.28
   Compiling shlex v1.3.0
   Compiling toml_writer v1.0.7+spec-1.1.0
   Compiling toml_parser v1.0.10+spec-1.1.0
   Compiling find-msvc-tools v0.1.9
</tr></table>

... (truncated)

Changelog

Sourced from tauri-winres's changelog.

[0.3.7]

Add WindowsResource::compile_for_everything to link the resource into every target of the package, including test binaries.

376950a feat: add compile_for_everything (#42) on 2026-10-19

Commits

347bd45 publish new versions (#43)
376950a feat: add compile_for_everything (#42)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust group with 6 updates: | Package | From | To | | --- | --- | --- | | [interprocess](https://github.com/kotauskas/interprocess) | `2.4.4` | `2.4.7` | | [serde_json](https://github.com/serde-rs/json) | `1.0.151` | `1.0.154` | | [psl](https://github.com/addr-rs/psl) | `2.1.238` | `2.1.245` | | [libc](https://github.com/rust-lang/libc) | `0.2.189` | `0.2.191` | | [objc2](https://github.com/madsmtm/objc2) | `0.6.4` | `0.6.5` | | [tauri-winres](https://github.com/tauri-apps/winres) | `0.3.6` | `0.3.7` | Updates `interprocess` from 2.4.4 to 2.4.7 - [Release notes](https://github.com/kotauskas/interprocess/releases) - [Commits](kotauskas/interprocess@2.4.4...2.4.7) Updates `serde_json` from 1.0.151 to 1.0.154 - [Release notes](https://github.com/serde-rs/json/releases) - [Commits](serde-rs/json@v1.0.151...v1.0.154) Updates `psl` from 2.1.238 to 2.1.245 - [Release notes](https://github.com/addr-rs/psl/releases) - [Commits](addr-rs/psl@v2.1.238...v2.1.245) Updates `libc` from 0.2.189 to 0.2.191 - [Release notes](https://github.com/rust-lang/libc/releases) - [Changelog](https://github.com/rust-lang/libc/blob/0.2.191/CHANGELOG.md) - [Commits](rust-lang/libc@0.2.189...0.2.191) Updates `objc2` from 0.6.4 to 0.6.5 - [Commits](madsmtm/objc2@objc2-0.6.4...objc2-0.6.5) Updates `tauri-winres` from 0.3.6 to 0.3.7 - [Release notes](https://github.com/tauri-apps/winres/releases) - [Changelog](https://github.com/tauri-apps/winres/blob/main/CHANGELOG.md) - [Commits](tauri-apps/winres@winres-v0.3.6...winres-v0.3.7) --- updated-dependencies: - dependency-name: interprocess dependency-version: 2.4.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: serde_json dependency-version: 1.0.154 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: psl dependency-version: 2.1.245 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: libc dependency-version: 0.2.191 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: objc2 dependency-version: 0.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust - dependency-name: tauri-winres dependency-version: 0.3.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: rust ... Signed-off-by: dependabot[bot] <support@github.com>

#82) Lands the five open Dependabot PRs as one change, so they merge and get tested together. ## What changed - **Rust (#81):** `global-hotkey` 0.8 → 0.9 (major). It builds with no change to `crates/linkunbound-shell/src/hotkey.rs`. - **Rust (#80):** `interprocess` 2.4.7, `serde_json` 1.0.154, `psl` 2.1.245, `libc` 0.2.191, `objc2` 0.6.5, `tauri-winres` 0.3.7. These are the same versions Dependabot proposed, pinned with `cargo update --precise`. - **Actions (#79):** `rust-cache`, `setup-node`, `install-action`, `upload-artifact`, `download-artifact` and `setup-uv`, each pinned to its new SHA. - **Picker npm (#78):** react / react-dom 19.3.1, Biome 2.6.3, Stryker 10.1.1, user-event 14.6.8, plugin-react 6.1.2, jsdom 30.1.3. - **Tooling npm (#77):** `js-yaml` 5.5.0. - **Notices:** regenerated `THIRD-PARTY-BUNDLED.md` and `THIRD-PARTY-LICENSES.md` with `npm run notices`, so the rules check matches the lockfiles. ## Added on top - **`minimatch` override (^11.0.4), scoped to `@stryker-mutator/core`.** Stryker pins minimatch 10, which is hit by GHSA-g3hv-75wg-m249 (moderate). The `npm audit` step for the picker would fail on `main` too. This follows the existing scoped `qs` override. - **`app/biome.json` migrated with `biome migrate`.** The schema moves to 2.6.3, and `"recommended": true` becomes `"preset": "recommended"`. Without this, Biome 2.6 warns that the schema doesn't match. ## Checked locally (Windows) - `cargo clippy --workspace --all-targets`: no warnings. - `cargo check -p` passes for each crate on its own. - `cargo nextest`: 457 passed. - `cargo fmt --check`: clean. - Picker: `npm run lint`, `npm run build`, 203 vitest tests. - `npm audit --audit-level=moderate` is clean in `app` and at the root. - `npm run lint:md` is clean. - `npm run notices` leaves no diff. ## For the reviewer - **The global shortcut was not tried by hand.** `global-hotkey` is a major bump, so it's worth one manual press to see it still opens the picker. - **`stryker run --dryRunOnly` fails locally, the same way on `main`.** `src/markdown.test.ts` imports `../../THIRD-PARTY-*.md`, which sits outside Stryker's sandbox. It happens with minimatch 10 as well, so this branch doesn't cause it. This PR doesn't touch `app/src`, so the mutants job won't run it here. Supersedes #77, #78, #79, #80 and #81. Dependabot closes them on its own once these versions are on `main`.

dependabot · 2026-11-02T13:10:04Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Nov 1, 2026

rgdevment mentioned this pull request Nov 2, 2026

chore(deps): Dependabot's Rust, npm and Actions updates land together. #82

Merged

dependabot Bot closed this Nov 2, 2026

dependabot Bot deleted the dependabot/cargo/rust-43853c95dc branch November 2, 2026 13:10

Navigation Menu

Repository navigation

chore: bump the rust group with 6 updates - #80

chore: bump the rust group with 6 updates#80
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/rust-43853c95dc

dependabot Bot commented on behalf of github Nov 1, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.4.7

General

Windows

2.4.6

2.4.5

v1.0.154

v1.0.153

v1.0.152

0.2.191

Support

Added

Fixed

Changed

0.2.190

0.2.191 - 2026-10-16

Support

Added

Fixed

Changed

0.2.190 - 2026-10-02

winres v0.3.7

[0.3.7]

[0.3.7]

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 1, 2026 •

edited

Loading